Skip to content
OpenAdvisories

Archive

29 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /29 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

144 results · Feed

  • Medium 6.1
    CVE-2023-51800 Public exploit

    Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arb…

  • Medium 6.1
    CVE-2023-51802 Public exploit

    Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to exec…

  • Critical 9.8
    CVE-2023-51801 Public exploit

    SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary…

  • Medium 5.9
    CVE-2024-24028

    Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive informatio…

  • Medium 5.5
    CVE-2024-24246

    Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count…

    qpdf qpdf Debian Alpine
  • Critical 9.8
    CVE-2024-24525

    An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code v…

  • Medium 6.5
    CVE-2024-24110

    SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET …

  • High 7.8
    CVE-2024-24520

    An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the langua…

  • High 8.8
    CVE-2024-27656

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability al…

  • Medium 6.5
    CVE-2024-27662

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability a…

  • Medium 6.5
    CVE-2024-27660

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability a…

  • Medium 6.5
    CVE-2024-27661

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…

  • High 8.8
    CVE-2024-27655

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerabilit…

  • Medium 6.5
    CVE-2024-27659

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability all…

  • High 8.8
    CVE-2024-27657

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerabilit…

  • Medium 6.5
    CVE-2024-27658

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…

  • Critical 9.8
    CVE-2024-25239

    SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL com…

  • Medium 6.5
    CVE-2024-25811

    An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information.

  • Critical 9.6
    CVE-2024-25292 Public exploit

    Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML…

  • Critical 9.8
    CVE-2024-25291 Public exploit

    Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.

  • Medium 6.1
    CVE-2024-25167

    Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted scrip…

  • Critical 9.8
    CVE-2024-25180 Public exploit

    An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf…

  • High 7.5
    CVE-2024-22871

    Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service

    An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__5920 function.

    cass-config-builder clojure org.clojure:clojure clojure Debian Ubuntu Alpine Wolfi Maven
  • Critical 9.8
    CVE-2024-26548

    An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafte…